Indexscan 2.0 Released - Modules - XOOPS News - XOOPS Web Application System

XOOPS

News

News World of XOOPS Developers Hacks Themes Archive Submit News

Modules: Indexscan 2.0 Released

Posted by: culexOn 2009/12/2 9:50:00 4861 reads

Indexscan scans your webfolders to see if you have folders without index files. Should it find a folder without index.html, index.htm, index.php or index.php3 it prints out the location and you can then descide weather to manually place a new or use the automatic create link and automaticly create index.html files in all folders that are missing.

The tool is only accessable through admin in your site.

I have now released indexscan as a version 2.0.

Changes are.:

- Added search words "fromCharCode","%69%66%72%61%6D%65","document.write(unescape(" to search words in iframe scan, to look for encoded javascript includes
- Spiced the scanning up with some highlighting javascript + some jquery for the scan and messages with lazy load
- Excluded the modules/indexscan from the iframe scan. The description and functions contain multible iframe-words and thus always gets caught in the scan.

- french translation and style css corrections (thanks Kris_fr)

Default english translations have been added in all language files. Feel free to send me in your language so I can change to correct language.

Note: PHP 5 required

Download from here

or

http://www.culex.dk

The comments are owned by the author. We aren't responsible for their content.

user

Re: Indexscan 2.0 Released

ghia Published 12/02/2009 10:24 Updated 12/02/2009 13:54 Community Support Member Joined 07/03/2008 Comments 4953

Congrats with the new version!

Quote:

download from http://sourceforge.net/projects/xoops/

Didn't noticed this module (nor version 1.0) in the downloads from module repository, or are they located somewhere else?

Quote:

- Excluded the modules/indexscan from the iframe scan. The description and functions contain multible iframe-words and thus always gets caught in the scan.

A blind spot!
The module should exclude the files of itself, where a false detection can occur, but check all other files in the module directory.
The excluded files should be checked by a MD5 checksum as is done with the XOOPS install files (see release notes).

Re: Indexscan 2.0 Released

annassih Published 12/02/2009 10:34 Just popping in Joined 03/10/2007 Comments 5

thanks culex

user

Re: Indexscan 2.0 Released

Mamba Published 12/02/2009 12:01 Moderator Joined 04/23/2004 Comments 11409

Download the GNU Tarball from the SourceForge SVN

user

Re: Indexscan 2.0 Released

culex Published 12/02/2009 19:48 Module Developer Joined 09/23/2004 Comments 711

@ Ghia Thank you :)

Quote:

The module should exclude the files of itself, where a false detection can occur, but check all other files in the module directory. The excluded files should be checked by a MD5 checksum as is done with the XOOPS install files (see release notes).

Thats and excellent idea actually. I'll have to look into this. Was not too happy to leave anything out of the scan, but got tired to see indexscan files showing up in the search everytime. On the other hand it is only one admin file that gets caught. So maybe I can make an exclude for this.

The md5 checksum is a better idea I think. I'll look into this right away.

Quote:

Didn't noticed this module (nor version 1.0) in the downloads from module repository, or are they located somewhere else?

I actually tried to upload in version 1.0 but had some problems and therefore I just added the sourceforce + my website link. So they are located both places.

I did update the reposite with the 2.0 but it hasn't been refreshed yet :)

user

Re: Indexscan 2.0 Released

kris_fr Published 12/03/2009 1:10 Theme Designer Joined 12/31/2005 Comments 1009

Greats Work , thanks

user

Re: Indexscan 2.0 Released

Mamba Published 12/03/2009 6:41 Moderator Joined 04/23/2004 Comments 11409

Quote:

I did update the reposite with the 2.0 but it hasn't been refreshed yet :)

It's done now: download here

user

Re: Indexscan 2.0 Released

sadistiko Published 12/03/2009 8:10 Friend of XOOPS Joined 12/13/2004 Comments 477

Sorry, but I don't understand what is the point of this module.

user

Re: Indexscan 2.0 Released

ghia Published 12/03/2009 9:51 Community Support Member Joined 07/03/2008 Comments 4953

Good point!
I added the description from the first version to the article.

user

Re: Indexscan 2.0 Released

sadistiko Published 12/03/2009 16:33 Friend of XOOPS Joined 12/13/2004 Comments 477

Thanks Ghia

user

Re: Indexscan 2.0 Released

culex Published 12/03/2009 20:29 Module Developer Joined 09/23/2004 Comments 711

ouch yeah. Maybe people would like to know what it does ;)

Thanks Ghia..

@Ghia, still trying to make this md5 checksum work using the function from the install... But for some reason I get "invalid content" even though $sum and $txt have equal value.

user

Re: Indexscan 2.0 Released

ghia Published 12/04/2009 1:12 Updated 12/04/2009 1:46 Community Support Member Joined 07/03/2008 Comments 4953

Maybe open a forum thread with the code snippet that fails.

Also important to know: PHP 5 required!
If not, you get this error:
Quote:

Parse error: syntax error, unexpected '&', expecting T_VARIABLE or '$' in /modules/indexscan/admin/index.php on line 195

user

Indexscan 2.01

culex Published 12/08/2009 0:54 Module Developer Joined 09/23/2004 Comments 711

I have now updated the module to 2.01. If the content of the admin/index.php changes you'll see a big red warning in the screen

Other Changes are

- Deleted index.html from admin folder. There is already index.php present.
- Added 2 image files verified and alert.
- Added md5parser.php. This is included in index.php to check for changes on the file against checksum.
- All other files and folders in /admin/ is being checked by injection scan

Added 2 new language definitions to admin.php

// Added in 2.01
define ("_AM_INDEXSCAN_NOTVERIFY"," : The Checksum of this file is different from original!");
define ("_AM_INDEXSCAN_VERIFIED"," Checksum for admin/index.php is verified.");

user

_CM_RE Indexscan 2.01

Runeher Published 12/08/2009 6:16 Module Developer Joined 01/24/2008 Comments 825

Nice module, Culex... :)

user

Re: Indexscan 2.0 Released

kris_fr Published 12/08/2009 10:13 Theme Designer Joined 12/31/2005 Comments 1009

Thanks,

french translation for 2.01 version, here --> http://xfr.svn.sourceforge.net/viewvc/xfr?view=rev&revision=998

user

CM_RE Indexscan 2.01

culex Published 12/08/2009 10:25 Module Developer Joined 09/23/2004 Comments 711

Thanks :)

French language added both sourceforge and on culex.dk. Thanks kris_fr

Login

Username

Password

Remember me

Register now! | Lost Password?

Search

Advanced Search

Recent Comments

Re: New Admin Theme for XOOPS (Beta)

Publisher liomj 10/28/2024 23:33
Sanford Pharmacy: Exceptional Pharmacy Services Tailored to You

Publisher donaldjohn 10/16/2024 9:53
Re: New Admin Theme for XOOPS (Beta)

Publisher walkero 10/15/2024 18:30
Re: XOOPS 2.5.12 Beta-2 available for Testing

Publisher cadch 08/30/2024 6:33
Re: XOOPS 2.5.12 Beta-2 available for Testing

Publisher cadch 08/30/2024 6:30

Who's Online

251 user(s) are online (18 user(s) are browsing XOOPS News)

Members: 0

Guests: 251

Donat-O-Meter

Stats
Goal:	$100.00
Due Date:	Nov 30
Gross Amount:	$0.00
Net Balance:	$0.00
Left to go:	$100.00

Latest GitHub Commits

{{ record.sha.slice(0, 7) }} - {{ record.commit.message | truncate }}

{{ record.commit.author.name }} {{ record.commit.author.date | formatDate }}

Archives

News archives